Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
File: bkif4cfiCgsMY4QsRcFsV2MXhdM.mft (raw, json)
Hash identifier: 460JYnA/3JJI+HAPL8oy2d5H8xCTa8MnOlOqA+bSkx8=
Subject key identifier: 4B:1B:10:43:1C:46:A9:21:B9:33:A0:37:2C:66:63:9A:CE:5D:C0:85
Authority key identifier: 6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
Certificate issuer: /CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Certificate serial: 0198D473D614DE9FE130F9B3DB3E3C2B5AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 01:03:37 +0000
Manifest this update: Sat 23 Aug 2025 01:03:37 +0000
Manifest next update: Sun 24 Aug 2025 01:03:37 +0000
Files and hashes: 1: GDkJM0lrFwKj0pA-1b6WqbIKy5U.roa (hash: AJLBt3MjV7p+Y7RRJ8TCQIrAHHyRPR0203cHSf77IXw=)
2: bkif4cfiCgsMY4QsRcFsV2MXhdM.crl (hash: NVVvIUk+oMS3xGZ4g1dnPRe33Kvb5FMtAZGd2TbHAlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:d6:14:de:9f:e1:30:f9:b3:db:3e:3c:2b:5a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Validity
Not Before: Aug 23 01:03:37 2025 GMT
Not After : Aug 24 01:03:37 2025 GMT
Subject: CN=4b1b10431c46a921b933a0372c66639ace5dc085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c5:ba:c7:c5:bb:bf:f8:9d:8d:9a:9d:2d:cc:
7a:66:c3:19:94:69:e2:a1:f7:61:4d:58:84:72:44:
31:9c:97:4d:fb:a0:e2:61:6f:4c:cd:86:e3:ff:2f:
e8:91:07:10:17:ba:3f:73:1f:29:a9:d8:5f:6b:2b:
d1:f7:4e:22:15:45:3e:4b:4b:22:37:e3:8f:de:c9:
e8:27:e0:b8:49:2a:97:ac:e4:0b:08:2a:ec:7c:d7:
8c:9d:3f:12:7f:68:22:f4:e0:37:23:ac:65:6e:57:
a0:09:97:48:c5:f0:fd:83:cb:02:43:85:aa:2e:13:
34:74:67:fb:5e:9b:19:7d:eb:f9:31:11:96:93:01:
be:64:d3:db:78:ef:a5:ba:f2:62:93:15:4a:4b:20:
3f:65:97:13:d4:24:22:8c:da:32:f7:32:ee:4b:07:
d3:7a:e9:e7:e7:f4:a1:85:85:62:20:b8:d4:e3:cf:
c7:2d:bd:22:5e:09:22:a5:fe:e5:bc:78:11:35:f7:
8e:d8:80:75:0d:65:d5:20:eb:12:47:c3:04:78:14:
10:85:3f:ff:ea:50:16:48:2f:91:88:0f:f5:65:a4:
58:37:1c:6e:b5:3b:d4:72:0c:95:56:0d:1e:c0:3b:
d0:5d:32:69:1e:79:53:87:6c:01:d2:52:3e:76:a7:
13:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1B:10:43:1C:46:A9:21:B9:33:A0:37:2C:66:63:9A:CE:5D:C0:85
X509v3 Authority Key Identifier:
keyid:6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:35:ec:17:94:8d:49:a4:21:1d:56:d7:ce:08:cd:18:52:e2:
c5:98:39:9c:c2:56:33:c5:02:2f:6b:78:36:cf:31:7e:dd:2d:
1d:54:26:53:4c:29:36:c7:91:fa:06:31:8e:45:f5:af:98:2f:
c3:60:5a:b0:aa:a2:e5:f0:36:35:ec:e2:15:88:da:41:cc:aa:
78:60:dc:d4:f4:30:77:12:f7:b2:19:6d:da:9a:c7:65:e4:7e:
c1:67:b0:4e:a1:c9:ea:fd:fc:eb:b3:92:0d:29:91:60:64:ac:
66:0d:d9:e6:c9:2e:48:bc:8b:34:50:a5:63:27:26:d4:75:8e:
3d:af:7a:a8:16:22:f7:b5:39:94:92:d7:c1:e1:e6:e6:ed:59:
3c:81:97:c5:81:ed:7b:4e:66:13:6d:19:57:06:5a:78:68:89:
a6:5b:91:ab:f6:b7:3d:1b:2c:88:ad:f7:5f:9d:12:8a:2e:0c:
66:b8:52:9b:6d:f7:c4:07:bf:35:ce:75:f8:04:7a:dc:9c:1d:
ef:0e:83:f6:10:81:f0:1a:86:6c:e0:1c:87:5a:59:2f:ef:6e:
8a:d1:76:ee:a7:92:f0:d1:35:60:a3:ef:45:ae:cf:22:e9:10:
fb:cd:4c:94:b4:e5:9b:4f:8e:9a:02:b8:53:c4:6d:81:02:0f:
6d:4d:e1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:44 2025 by rpki-client